🇸🇮
administrator
2026-09-11 22:17:14
UTC ·
(1 month ago)
2026-09-06 00:06:43,135 fail2ban.actions [1054]: NOTICE [apache-badbots] Ban 34.13.165.253
2026-09-06 00:06:43,135 fail2ban.actions [1054]: NOTICE [apache-badbots] Ban 34.13.165.253
2026-09-06 00:06:43,135 fail2ban.actions [105 ...
show more
2026-09-06 00:06:43,135 fail2ban.actions [1054]: NOTICE [apache-badbots] Ban 34.13.165.253
2026-09-06 00:06:43,135 fail2ban.actions [1054]: NOTICE [apache-badbots] Ban 34.13.165.253
2026-09-06 00:06:43,135 fail2ban.actions [1054]: NOTICE [apache-badbots] Ban 34.13.165.253
...
show less
Bad Web Bot
Web Spam
Email Spam
Blog Spam
Port Scan
Brute-Force
Web App Attack
🇳🇱
Site.eu
2026-08-10 01:20:27
UTC ·
(2 months ago)
Excessive multi-domain requests
Brute-Force
🇺🇸
c y
2026-08-09 23:16:45
UTC ·
(2 months ago)
Security Monitor detected: path_traversal
Port Scan
🇳🇱
homeshowdomain.nl
2026-08-09 22:00:37
UTC ·
(2 months ago)
Auto-ban: single probe for restricted files (.env / backups / admin endpoints). Likely mass-scan on 2026-08-08.
Web App Attack
SSH
Hacking
🇩🇪
netclix.gr
2026-08-09 17:25:33
UTC ·
(2 months ago)
(security_scan) Sensitive File Scan Blocked 34.13.165.253 (253.165.13.34.bc.googleusercontent.com): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.13.165.253 - - [09/Aug/2026:20:25:21 +0300] "GET /assets../.. ...
show more
(security_scan) Sensitive File Scan Blocked 34.13.165.253 (253.165.13.34.bc.googleusercontent.com): 1 in the last 4600 secs; Ports: *; Direction: inout; Trigger: LF_CUSTOMTRIGGER; Logs: 34.13.165.253 - - [09/Aug/2026:20:25:21 +0300] "GET /assets../../../.env HTTP/1.1" 400 150 "-" "-"
show less
Port Scan
🇩🇪
raph
2026-08-09 17:23:06
UTC ·
(2 months ago)
[DOT FILES] crawler *.env*, .git*, .config*, etc.
Bad Web Bot
Web App Attack
🇫🇷
masterguru
2026-08-09 17:22:46
UTC ·
(2 months ago)
Restricted File Access Attempt. Matched phrase ".env" at REQUEST_FILENAME. (930130-201)
Hacking
Web App Attack
🇳🇱
Cloud86 B.V.
2026-08-09 15:52:04
UTC ·
(2 months ago)
categories: DDoS Attack
DDoS Attack
🇩🇪
BlueWire Hosting
2026-08-09 15:51:29
UTC ·
(2 months ago)
Bad bot ignoring robot.txt
Bad Web Bot
🇧🇷
vfAcceloReporter
2026-08-09 15:48:12
UTC ·
(2 months ago)
34.13.165.253 - - [09/Aug/2026:12:48:12 -0300] "GET /files../.env HTTP/1.1" 301 169 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0;
[email protected] )"
...
Brute-Force
Web App Attack
Exploited Host
🇮🇹
mediarama.com
2026-08-09 15:42:42
UTC ·
(2 months ago)
Banned by Fail2Ban
Web App Attack
🇩🇰
ScamAware
2026-08-09 15:31:36
UTC ·
(2 months ago)
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 131. Unique request paths counted internally: 126. Cloudflare ac ...
show more
Detected by Cloudflare Security Events via WordPress automation. Detection: sensitive_files (Sensitive files, source control, config, and backups). Hits from same IP in last 60 minutes: 131. Unique request paths counted internally: 126. Cloudflare action: block. Cloudflare source: firewallCustom.
show less
Web App Attack
🇬🇧
OptimusGO
2026-08-09 14:56:52
UTC ·
(2 months ago)
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-08-09 15:56:52 UTC
Log evidence:
34.13.165.253 - - [09/Aug/2026:15:56:51 +0100] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 301 162 " ...
show more
Malicious activity detected: web_attack
Server: commstackbc (185.127.18.66)
Attack: web_attack
Timestamp: 2026-08-09 15:56:52 UTC
Log evidence:
34.13.165.253 - - [09/Aug/2026:15:56:51 +0100] "GET /@fs/root/.aws/credentials?raw?? HTTP/1.1" 301 162 "-" "Mozilla/5.0 (compatible; Amazonbot/0.1; +https://developer.amazon.com/support/amazonbot)"
34.13.165.253 - - [09/Aug/2026:15:56:51 +0100] "GET /assets../../../.aws/credentials HTTP/1.1" 400 150 "-" "-"
34.13.165.253 - - [09/Aug/2026:15:56:51 +0100] "GET /@fs/root/.env?raw HTTP/1.1" 301 162 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot"
show less
Port Scan
Brute-Force
🇩🇪
jasperedv.de
2026-08-09 13:46:23
UTC ·
(2 months ago)
Apache Login - Brutforcing
Web App Attack
Brute-Force
Anonymous
2026-08-09 11:59:53
UTC ·
(2 months ago)
34.13.165.253 - - [09/Aug/2026:06:58:27 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.13.165.253
34.13.165.253 - - [09/Aug/2026:06:58:27 -0500] "GET /.env.local HTTP/1.1 ...
show more
34.13.165.253 - - [09/Aug/2026:06:58:27 -0500] "GET /.env HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; PerplexityBot/1.0; +https://perplexity.ai/perplexitybot)" 34.13.165.253
34.13.165.253 - - [09/Aug/2026:06:58:27 -0500] "GET /.env.local HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko); compatible; ChatGPT-User/1.0; +https://openai.com/bot" 34.13.165.253
34.13.165.253 - - [09/Aug/2026:06:58:27 -0500] "GET /.env.development HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; OAI-SearchBot/1.3; +https://openai.com/searchbot)" 34.13.165.253
34.13.165.253 - - [09/Aug/2026:06:58:27 -0500] "GET /.env.production HTTP/1.1" 403 199 "-" "Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; [email protected] )" 34.13.165.253
34.13.165.253 - - [09/Aug/2026:06:58:28 -0500] "GET /.env.backup HTTP/1.1" 403 199 "-" "Mozilla/5.0 (compatible; Amzn-SearchBot/1.0; +https://developer.amazon.com/support/amazonbot)" 34.13.165.253
34.13.165.253 - - [09/A
...
show less
Brute-Force
Bad Web Bot
Web App Attack